username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

refreshing-mcp-tool

هذا ليس مكتملاً أو جاهزاً بعد، لكنني أردت إيداع الكود. هذا ينفّذ بشكل أساسي بروتوكول قاعدة بيانات F5 المسمى "mcp"، والذي يعمل عبر مقبس UNIX domain. ذلك يعني أنك تحتاج إلى شل على جهاز F5 قبل أن تتمكن من استخدام أيٍّ من هذه الأدوات. عادةً ستمرر مخرجات سكربت إلى /var/run/mcp باستخدام socat، ثم تغذي...

CVE-2020-24033

fs.com S3900 24T4S 1.7.1 का नवीनतम संस्करण और सभी पिछले संस्करण, CSRF बैकस्टेज व्यवस्थापक फॉर्म में प्रमाणीकरण या टोकन प्रमाणीकरण तंत्र नहीं है, इसलिए एक क्रॉस-साइट रिक्वेस्ट फोर्जरी उपयोगकर्ता खाता जोड़ें है जो पूर्ण पहुंच वाला उपयोगकर्ता जोड़ने के लिए है। S3900 24T4S पर सभी फॉर्म क्रॉस-साइट...

git-alerts

GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...

tookie-osint

Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

CVE-2022-26138

CVE-2022-26138 POC Description root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with...

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

CVE-2023-32749

إثبات المفهوم لـ CVE-2023-32749 هذا إثبات مفهوم سريع وغير منظم كتبته لـ CVE-2023-32749 لـ Pydio Cells. يقوم البرنامج النصي بإنشاء حساب مستخدم جديد مع جميع الأدوار المتاحة عند توفير بيانات اعتماد صالحة. جميع الفضل يعود للباحثين الأصليين. التثبيت المتطلب الوحيد هو حزمة requests من بايثون لإجراء طلب...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 उपयोगकर्ता-खाता निर्माण के दौरान नाम फ़ील्ड के माध्यम से XSS की अनुमति देता है। TastyIgniter v3.0.7 के कई पृष्ठों में एक संग्रहीत क्रॉस-साइट स्क्रिप्टिंग भेद्यता मौजूद है जो JavaScript के मनमाने निष्पादन की अनुमति देती है। https://vulners.com/cve/CVE-2021-38699...

CVE-2026-28766

CVE-2026-28766 نقص المصادقة: نقطة نهاية حساب المستخدم الحقل| القيمة ---|--- CVE| CVE-2026-28766 الخطورة| حرج 9.3 متجه CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N الضعف CWE| CWE-306: فقدان المصادقة لوظيفة حرجة المكونات المتأثرة| Cloud API 2.12.2026 البائع| Gardyn Inc. المنتجات المتأثرة|...

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446 शोषण उपकरण FortiWeb उपकरणों में CVE-2025-64446 भेद्यता सत्यापन और शोषण के लिए शोषण उपकरण। विवरण यह उपकरण FortiWeb वेब एप्लिकेशन फायरवॉल में पथ ट्रैवर्सल भेद्यता CVE-2025-64446 का परीक्षण और शोषण करता है। इसका उपयोग भेद्यता स्थिति सत्यापित करने या उपयोगकर्ता खाते बनाने/संशोधित करने ...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

CVE-2026-16279

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts...

CVE-2026-16279 Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts...

CVE-2026-16279

An Improper Authorization vulnerability affects 3DPassport within 3DSwymer , spanning 3DEXPERIENCE Releases R2023x through R2026x . The flaw could allow an attacker to gain access to some user accounts. The CNA-assigned CVSS 3.1 score is 9.3 (Critical) , with a network-based attack vector, low co...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the Samba AD LDAP server. The AD DC database audit logging module can access values of LDAP messages freed by a preceding database module, leading to a use-after-free issue. This issue only occurs when certain privileged attributes are modified, such as userAccountControl...

CVE-2026-78115 SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-78115

SourceCodester Class and Exam Timetabling System 1.0 is affected by an improper authorization vulnerability in the User Account Update component, specifically in the file /admin/edit_user_account.php. Manipulation of the id/username argument allows a remote, authenticated attacker to bypass autho...